CVE-2026-50203: Apache Airflow SFTP provider: path traversal in SFTPHook.retrieve_directory
The Apache Airflow SFTP provider contains a path traversal weakness in SFTPHook.retrieve_directory that a malicious or compromised remote SFTP server can trigger with crafted directory-entry names, writing files outside the configured local destination. The vendor-assigned CVSS score is 9.1, and the flaw is affected before 5.8.1. Operators should upgrade the provider package to 5.8.1 or later and restrict downloads to trusted servers.
Overview
The SFTP provider for Apache Airflow contains a path traversal weakness in SFTPHook.retrieve_directory, which is also reached through the SFTPOperator get operation. A remote SFTP server that is malicious or compromised can supply crafted directory-entry names that cause files to be written outside the configured local destination directory.
Impact
- Files can land in unintended locations on the host running Airflow tasks, which is the weakness class CWE-22.
- The vendor-assigned CVSS score is 9.1, shown as critical in the record.
- According to the vendor description, no Airflow user account is required, so exposure depends on whether a deployment downloads directories from untrusted SFTP servers.
Affected products and versions
- Apache Software Foundation Apache Airflow SFTP provider (apache-airflow-providers-sftp) before 5.8.1.
- The fixed version given in the sources is 5.8.1.
Exploitation status
- The record shows this CVE is not listed in the CISA KEV catalog. No confirmed exploitation in the wild appears in the sources consulted.
- The SSVC exploitation field is recorded as none. The EPSS probability is 0.00879 with a percentile of 0.58699, which is a statistical estimate and not evidence of exploitation.
Remediation and mitigation
- Upgrade apache-airflow-providers-sftp to 5.8.1 or later, as stated in the vendor description and the linked patch.
- Until the upgrade is applied, limit SFTP directory downloads to servers that are fully trusted and use dedicated download directories with restricted permissions.
- Review DAGs and connections that use SFTP get or retrieve_directory operations.
Detection guidance
- Review SFTP transfer logs for files created outside the intended destination directory.
- Look for unexpected file writes by Airflow worker processes to paths outside their expected working areas.
Limitations of the available information
- The record gives only a summary of the directory-entry handling and includes no technical proof of concept. Whether a given deployment is affected depends on its SFTP usage, which the record does not show.
- The record does not describe the patch behavior beyond the linked pull request and the vendor description.
Frequently asked questions
Which versions are affected by CVE-2026-50203?
According to the record, the Apache Airflow SFTP provider (apache-airflow-providers-sftp) is affected before 5.8.1, and 5.8.1 is the fixed version listed.
Is this vulnerability being actively exploited?
The record shows it is not listed in CISA KEV, and no confirmed exploitation in the wild appears in the sources consulted.
Does an attacker need an Airflow account?
The vendor description says no Airflow account is required, so the risk is mainly for deployments that download directories from untrusted SFTP servers.
What should administrators do now?
Upgrade the SFTP provider to 5.8.1 or later and limit directory downloads to trusted servers until the upgrade is complete.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.